1Introduction
Welcome to the Star Pizza Restaurant Privacy Policy. We are committed to protecting and respecting your privacy. This policy explains how we collect, use, store, and share your personal information in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other applicable privacy laws.
Star Pizza Restaurant is the data controller responsible for your personal data. We are located at 123 High Street, London, Greater London, EC1A 1BB, United Kingdom. For any privacy-related questions, please contact our Data Protection Officer at [email protected].
This policy applies to:
- Visitors to our website at starpizzarestaurantmenu.com
- Customers who place orders through our website or via Just Eat
- Users who subscribe to our newsletter or marketing communications
- Anyone who contacts us via email, phone, or our contact form
By using our website or services, you agree to the collection and use of information in accordance with this policy.
2Information We Collect
We collect different types of information to provide and improve our services. The data we collect depends on how you interact with us.
2.1 Personal Data You Provide
We may collect the following personal information when you place an order, create an account, or contact us:
| Data Type | Examples | Purpose |
|---|---|---|
| Identity | Full name, username | Order processing, account management |
| Contact | Email, phone number, delivery address | Order delivery, communication |
| Financial | Payment card details (processed securely) | Payment processing |
| Transaction | Order history, preferences | Service improvement, recommendations |
| Communication | Emails, messages, feedback | Customer support, enquiries |
2.2 Technical Data (Automatically Collected)
When you visit our website, we automatically collect certain technical information:
- Device information: Device type, operating system, browser type and version
- Network data: IP address, internet service provider, referrer URL
- Usage data: Pages visited, time spent on pages, click patterns, navigation paths
- Location data: Approximate location based on IP address (for delivery availability)
2.3 Data from Third Parties
We may receive information about you from third-party services we work with, including:
- Just Eat: Order details and delivery information when you order through their platform
- Payment processors: Transaction confirmation data (we do not store full card details)
- Analytics providers: Website usage statistics (e.g., Google Analytics)
3How We Use Your Data
We use your personal data only for specific, legitimate purposes. Below is a breakdown of how we use your information:
- Order Processing: To prepare, process, and deliver your pizza orders accurately and efficiently.
- Customer Communication: To send order confirmations, delivery updates, and respond to your enquiries.
- Service Improvement: To analyse usage patterns and improve our website, menu, and overall customer experience.
- Marketing (with consent): To send promotional offers, newsletters, and special deals — only if you have opted in.
- Legal Compliance: To comply with legal obligations such as tax records, food safety regulations, and fraud prevention.
- Security: To protect our website, prevent fraud, and ensure the security of our services.
- Personalisation: To tailor content, offers, and recommendations based on your preferences (where permitted).
We will never sell, rent, or trade your personal data to third parties for their marketing purposes. Your data is used solely to serve you better.
4Legal Basis for Processing
Under UK GDPR, we must have a valid legal basis for processing your personal data. We rely on the following legal bases:
- Contract Performance: Processing necessary to fulfil our contract with you (e.g., processing your order).
- Legal Obligation: Processing required to comply with the law (e.g., tax records, food safety).
- Legitimate Interests: Processing necessary for our legitimate business interests, provided these don't override your rights (e.g., fraud prevention, service improvement).
- Consent: Where you have given explicit consent (e.g., marketing emails, optional cookies).
- Vital Interests: In rare cases, to protect someone's life (e.g., medical emergency during delivery).
5Data Sharing & Third Parties
We share your data only with trusted third parties who help us operate our business. These partners are contractually bound to protect your data.
5.1 Service Providers We Work With
- Delivery Partners: Just Eat and our own delivery drivers (for order fulfilment)
- Payment Processors: Secure payment gateways (Stripe, PayPal, etc.)
- Hosting Providers: Website and data hosting services
- Analytics Services: Google Analytics for website performance
- Marketing Platforms: Email marketing services (only if you've opted in)
5.2 Legal Disclosures
We may disclose your data if required by law, such as in response to a court order, legal process, or request from law enforcement authorities. We will only disclose the minimum information necessary.
5.3 Business Transfers
In the event of a merger, acquisition, or sale of assets, your personal data may be transferred to the new owner. We will notify you of any such change and any choices you may have regarding your data.
6Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy, unless a longer retention period is required or permitted by law.
| Data Category | Retention Period | Reason |
|---|---|---|
| Order records | 7 years | Tax and legal compliance |
| Account information | Duration of account + 2 years | Service provision |
| Marketing preferences | Until consent withdrawn | Marketing compliance |
| Customer communications | 3 years | Support and dispute resolution |
| Website analytics data | 26 months | Performance analysis |
| CCTV footage (if applicable) | 30 days | Security |
After the retention period expires, your data is securely deleted or anonymised. You can request earlier deletion by exercising your right to erasure (see Section 8).
8Your Rights Under UK GDPR
As a data subject, you have specific rights regarding your personal data. We are committed to helping you exercise these rights.
Right to Access
Request a copy of the personal data we hold about you.
Right to Rectification
Request correction of inaccurate or incomplete data.
Right to Erasure
Request deletion of your data ("right to be forgotten").
Right to Restrict
Request limitation of how we use your data in certain cases.
Right to Portability
Receive your data in a structured, machine-readable format.
Right to Object
Object to processing based on legitimate interests or marketing.
How to Exercise Your Rights
To exercise any of these rights, please contact us at [email protected] or write to our Data Protection Officer at the address below. We will respond to your request within 30 days.
You will not have to pay a fee to access your personal data or exercise any of the rights listed above. However, we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive.
Complaints
If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.
9Data Security
We take the security of your personal data seriously and have implemented appropriate technical and organisational measures to protect it against unauthorised access, alteration, disclosure, or destruction.
9.1 Security Measures We Use
- SSL/TLS Encryption: All data transmitted between your browser and our servers is encrypted using HTTPS.
- Secure Payment Processing: Payment data is processed by PCI DSS-compliant payment providers. We do not store full credit card details.
- Access Controls: Employee access to personal data is restricted to those who need it for their role.
- Regular Security Audits: We conduct regular security assessments and updates to our systems.
- Staff Training: All employees receive data protection and security training.
- Incident Response: We have procedures in place to detect, investigate, and report any data breaches.
In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify the ICO within 72 hours and inform affected individuals without undue delay.
10Children's Privacy
Our website and services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately at [email protected], and we will take steps to delete such information.
11International Data Transfers
Some of our third-party service providers may be located outside the United Kingdom or the European Economic Area (EEA). When we transfer your data internationally, we ensure appropriate safeguards are in place, such as:
- Standard Contractual Clauses approved by the ICO/European Commission
- Adequacy decisions for the recipient country
- Binding Corporate Rules where applicable
You can request a copy of the safeguards we have in place by contacting us.
12Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:
- Update the "Last Updated" date at the top of this page
- Notify you via email (if you have an account with us)
- Display a prominent notice on our website
We encourage you to review this policy periodically to stay informed about how we protect your data. Your continued use of our services after any changes constitutes acceptance of the updated policy.
13Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please don't hesitate to contact us. We are here to help.
Star Pizza Restaurant
123 High Street, London, Greater London, EC1A 1BB, United Kingdom
Email: [email protected]
Phone: +44 20 1234 5678
General Enquiries: [email protected]
We aim to respond to all privacy-related enquiries within 30 days. For urgent matters, please call us directly during our opening hours.
Related Policies
- Terms of Service — Our website terms and conditions
- Contact Page — Get in touch with our team
- Home — Return to our homepage